Hi, > dpatch-get-origtargz should provide a way to do sum checking > (md5, sha1) to ensire that the contents of upstream file was has not been > silently changed for some reason keeping the same file name. > > I suggest that dpatch-get-origtargz accept options for exact url to download > the tarball from (since the one provided in watch file might not be reliable > when patterned) and checksum to verify against.
Patch welcome. Shouldn't be too hard ti implement what you say; but I am doubtful if it's really feasible or easy to maintain the hash sum on developer side. regards, junichi -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]